1 files changed, 5 insertions, 0 deletions
diff --git a/bug/edit.php b/bug/edit.php
index ad1ea36..9aaac38 100644
--- a/bug/edit.php
+++ b/bug/edit.php
@@ -27,6 +27,11 @@ if($id != "") {
     $submitter = $result['submitter'];
     $description = $result['description'];
 }
+
+if(!$_SESSION['user_can_edit_bugs'] || ($submitter != $_SESSION['user_name'])) {
+    echo "You cannot edit bugs!";
+    goto footer;
+}
 ?>
 
 <form action="update.php?id=<?php echo $id; ?>" method="post">